Only EU citizens because GDPR is a European regulation, not meant to protect expats and

foreign

Only those who are staying legally in the EU at the moment of making a privacy-related

complaint

Every individual, regardless of nationality, whose data is processed by a business offering